CVE-2025-1592

Name of the Vulnerable Software and Affected Versions SourceCodester Best Employee Management System version 1.0

Description A vulnerability was found in the Add Role Page component, specifically in the file /admin/Operations/Role.php. The issue is related to the manipulation of the assign name/description argument, which leads to cross-site scripting. This can be exploited remotely.

Recommendations For SourceCodester Best Employee Management System version 1.0, as a temporary workaround, consider restricting access to the /admin/Operations/Role.php file until a patch is available. Avoid using the assign name/description argument in the affected page to minimize the risk of exploitation.